Securing The Network: Building A Simple Network
Securing The Network: Building A Simple Network
Securing The Network: Building A Simple Network
Network
http://vnexperts.net
ICND1 v1.01-1
Closed Networks
ICND1 v1.01-2
Open Networks
http://vnexperts.net
ICND1 v1.01-3
Threat Capabilities
More Dangerous and Easier to Use
http://vnexperts.net
ICND1 v1.01-4
E-Business Challenge
http://vnexperts.net
ICND1 v1.01-5
Motivations
Classes of Attack
Nation-states
Intelligence
Passive
Terrorists
Theft
Active
Criminals
DoS
Close-in
Hackers
Embarrassment
Insider
Crackers
Challenge
Distributed
Competitors
Script kiddies
Disgruntled
employees
Government
http://vnexperts.net
ICND1 v1.01-6
Common Threats
Physical installations
Hardware threats
Environmental threats
Electrical threats
Maintenance threats
Reconnaissance attacksLearning information about a target
network by using readily available information and applications
Access attacksAttacks on networks or systems for these reasons:
Retrieve data
Gain access
Escalate their access privileges
Password attacksTools used by hackers to compromise
passwords
http://vnexperts.net
ICND1 v1.01-7
http://vnexperts.net
ICND1 v1.01-8
Summary
Sophisticated attack tools and open networks continue to
generate an increased need for network security policies and
infrastructure to protect organizations from internally and
externally based attacks.
Organizations must balance network security needs against
e-business processes, legal issues, and government policies.
Establishing a network security policy is the first step in changing
a network over to a secure infrastructure.
Network adversaries come in many shapes and sizes and with
multiple motivations.
http://vnexperts.net
ICND1 v1.01-9
Summary (Cont.)
It is very important to provide physical installation security for
enterprise network devices.
Password attack threats can be mitigated.
Restrict password use.
Disable accounts after unsuccessful logins.
Do not use cleartext passwords; use strong passwords.
http://vnexperts.net
ICND1 v1.01-10